BlazeDVD Free Edition 6.1.1.6 Buffer Overflow

!/usr/bin/python Exploit Title:BlazeDVD Free Edition 6.1.1.6 Buffer Overflow Date: 27-03-2013 Exploit Author: metacom RST Vendor Homepage: http://www.blazevideo.com/dvd-player/ Download version 6.1.0.6: www.blazevideo.com/download.php?product=BlazeDVD Version: BlazeDVD Free Edition 6.1.1.6 Tested...

[Netsparker Community Edition v2.5.2.0] Released!

Netsparker Community Edition is a SQL Injection Scanner. It’s a free edition of our web vulnerability scanner for the community so you can start securing your website now. It’s user friendly, fast, smart and as always False-Positive-Free. It shares many features with professional edition. It can...

AV Arcade Free Edition - 'add_rating.php?id' Blind SQL Injection

Exploit Title: AV Arcade Free Edition Blind SQL Injection Date: 31/08/2012 Author: DaOne @LibyanCA Software Link: http://www.avscripts.net/avarcade/freearcadescript/ Google Dork: intext:Powered by AV Arcade Free Edition" Exploit-DB Note: Must be logged in. Exploit...

AV Arcade Free Edition Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: AV Arcade Free Edition Blind SQL Injection Date: 31/08/2012 Author: DaOne @LibyanCA Software Link: http://www.avscripts.net/avarcade/freearcadescript/ Google Dork: intext:"Powered by AV Arcade Free Edition" Exploit...

GLSA-201201-07 : NX Server Free Edition, NX Node: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201201-07 NX Server Free Edition, NX Node: Privilege escalation NX Server Free Edition and NX Node use nxconfigure.sh, a setuid script containing an unspecified vulnerability. Impact : A local attacker could gain escalated...

RealVNC VNC Server Free Edition 4.1.3 Denial Of Service

================================================================================================== $$$$$$$\ $$\ $$\ $$\ $$$$$$\ $$ $$\ | $$ | $$ | $$ $$\ $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | $$$$$$$\ |$$ |$$ |$$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ |...

Flashlight Free Edition <= 1.0 SQLi and Directory Traversal Vulnerability

Flashlight Free Edition is prone to SQL injection SQLi and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Directory traversal

Directory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

CVE-2009-4205

Directory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

CVE-2009-4205

Flashlight Free Edition (

CVE-2009-4204

SQL injection vulnerability in read.php in Flashlight Free Edition allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4204

Flashlight Free Edition is affected by a remote SQL injection in the read.php handler, exploitable via the id parameter. The issue is described as allowing an attacker to execute arbitrary SQL commands and is associated with the vulnerability entry CVE-2009-4204. Public references (e.g., Exploit-...

CVE-2009-2155

Cross-site scripting XSS vulnerability in report/ReportViewAction.do in WebNMS Free Edition 5 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in report/ReportViewAction.do in WebNMS Free Edition 5 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2155

Cross-site scripting XSS vulnerability in report/ReportViewAction.do in WebNMS Free Edition 5 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2155

CVE-2009-2155: The XSS vulnerability affects WebNMS Free Edition 5, specifically in the report/ReportViewAction.do handler where the type parameter can inject arbitrary script/HTML. Root cause is unvalidated input reflected in the page context, enabling remote script execution. The available docu...

Flashlight Free Edition Local File Inclusion / SQL Injection

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX Flashlight Free Edition - LFI/SQL Multiple Remote Vul XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX RATM: "All hell can't stop us now!" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX --Author : k4m1k451 --E-mail :...

Flashlight Free Edition (LFI/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= Flashlight Free Edition LFI/SQL Multiple Remote Vulnerabilities =================================================================...

Cross-site scripting vulnerability in leger (free edition)

Overview leger free edition from 'AD2000' contains a cross-site scripting vulnerability. leger free edition from 'AD2000' is a software to manage conference room reservations. leger free edition contains a cross-site scripting vulnerability. The vendor has reported that Ver. 1.6.4 released on May...

JVN#57036470 Cross-site scripting vulnerability in leger (free edition)

leger free edition from 'AD2000' is a software to manage conference room reservations. leger free edition contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the...